Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [bastion]

55 questions
1
vote
0 answers

How can a TCP connection be passed through a routing server in AWS to its originator to avoid timeouts?

I'm a front end developer that has found myself needing to solve a backend issue with a site I'm working on. I did not set it up and am trying to understand how its currently structured. Within AWS there are 2 EC2 instances in the same VPC. One with…
upsDuck
  • 11
  • 1
1
vote
1 answer

How to check Bastion login logs in Azure to VM

We share a domain admin account credential for one of our Active Directory VM stored in Azure. Users will connect to the VM via Bastion in Azure. Currently someone disabled a user in the AD and we would like to check this login was done from whose…
alvin chen
  • 11
  • 2
0
votes
1 answer

AWS Session Manager SSH MFA

I know that it's possible to enable SSH access with AWS Session Manager and use MFA with Bastion. My question is, can I combine the two? I want to ssh into an EC2 instance proxying through Session Manager, but also be prompted for MFA. Thanks
apr
  • 1
  • 1
0
votes
0 answers

Could not resolve hostname nodename nor servname provided, or not known only with rsync

I work with sensitive data, so my host requires that I use a bastion to access the server. I can connect to the server without any problem in SSH using the following command: ssh userremotemachine@remotemachine:userbastion@bastion On the other…
Thomas Rollet
  • 101
  • 1
  • 2
0
votes
1 answer

Allowing external access to bastion hosts on aws

I am trying to create a few bastion hosts in my VPC on aws to connect to my databases that are located in a private subnet. I am using this aws Quick start. I understand the basics of CIDR blocks and what they mean. However, I don't understand what…
Marwan
  • 103
  • 1
0
votes
1 answer

Is connection to Bastion Server Open to Anyone

My team uses a Bastion Server as a tunnel server to secure our AWS EC2 instances. The connection to Bastion was configured based on this article. To the best of my understanding, the Bastion server is created as a gateway to the instances I want…
Eilon Baer
  • 3
  • 1
0
votes
2 answers

SSH through bastion host gives: open failed: connect failed: Connection timed out

We have bastion server B. We need to SSH from A through B to C, using private key (we use keepass with keeAgent). In the bastion I have: AllowTcpForwarding yes. I tried to use proxyCammand: Host app Hostname *.*.*.* User my-user Port 22 …
user2503775
  • 223
  • 3
  • 9
0
votes
1 answer

How to use socket file to access server if SSH Agent forwarding is enabled

I have bastion host. I connect to the bastion host using username/password. And I have private key for destination Server. Flow: Local Machine -> Bastion -> Destination I know that It's dangerous to use Agent forwarding because someone may read my…
grep
  • 161
  • 1
  • 6
0
votes
1 answer

Setting up SSH jump box for Ansible - can't connect

I'm trying to use Ansible to deploy to an AWS host that does not have a public IP address. I'm able to reach the host manually by ssh onto a jump box, and on that box ssh onto the private machine like my machine-->bastion-->private server I don't…
Andy
  • 317
  • 2
  • 5
  • 16
0
votes
1 answer

Restrict ssh users remote IP via LDAP record

Our setup: LDAP server - OpenLDAP with openssh and sudo schemas. Bastion server - accepts SSH from anywhere and authenticates users via public keys stored in LDAP (using sssd) Destination server[s] - should accept SSH only from Bastion server and…
Alexey Kamenskiy
  • 794
  • 1
  • 9
  • 23
0
votes
0 answers

Bastion Server + EC2 Instances

I would to protect my VPC using a bastion. So I add to the bastion only the public keys. But I have some EC2 instances inside my VPC. Do I need to add the public both to bastion and EC2 instances?
p.magalhaes
  • 101
  • 2
0
votes
2 answers

how to access host behind a bastion?

I have bunch of hosts that can be accessed only from bastion hosts ( A linux server where I can ssh into and access my real host ). Iam able to access it using firefox with socks proxy, now How can I do the same on command line ? so all my…
Victor
  • 71
  • 2
  • 8
0
votes
1 answer

Automatically forwarding from Bastion to next server?

We at work use Bastion in our VPC to connect to several private servers, I have set up aliases (ssh host aliases) to speed up the process of bouncing to the next server, but this is a slow process and many users end up catting our config to find the…
ehime
  • 597
  • 2
  • 7
  • 15
0
votes
0 answers

Problems accessing to a RDS through a Bastion Host from a local K3s

I'm trying to build a local Kubernetes with K3s and I'm having problems to access to my RDD that is situated in the private Area of the VPN. For now, I'm trying to deploy a Passbolt (https://artifacthub.io/packages/helm/cnieg/passbolt) and I'm…
Teachh
  • 1
0
votes
1 answer

Use bastions config file for server configuration

I'm in the process of setting up a jump server/bastion host for several of our developers and was wondering if it is possible to use the config file on the bastion for final server resolution. E.g. we have developer bastion client Currently, I…
mikestreety
  • 101
  • 1
1 2
3
4